231554 matches found
CVE-2023-41803
CVE-2023-41803 : BitPay Checkout for WooCommerce (WordPress plugin) up to version 4.1.0 is affected by a Broken Access Control vulnerability due to missing authorization checks. The issue allows unauthenticated users to exploit inadequate access configuration to perform unauthorized actions. The ...
CVE-2023-41802
CVE-2023-41802 affects WordPress Plugin Super Socializer (Team Heateor) up to version 7.13.54. It is a Missing Authorization / Broken Access Control vulnerability enabling exploitation of improperly configured access control security levels. Public sources in Connected documents confirm affected ...
CVE-2023-41690
CVE-2023-41690: WordPress WiserNotify Social Proof plugin <= 2.5 suffers a Broken Access Control flaw that allows unauthenticated access due to missing authorization checks. The CVE is tracked for WiserNotify Social Proof (WordPress plugin). Connected sources confirm affected versions up to 2....
CVE-2023-41688
CVE-2023-41688 affects WordPress Bulk NoIndex & NoFollow Toolkit (Mad Fish Digital) up to version 1.5, due to Broken Access Control / Missing Authorization. Public sources list a CVSS v3.1 base score of 5.4 (Medium) with network attack vector and low privileges required. Patchstack notes the fix ...
CVE-2023-41683
CVE-2023-41683 (TelSender WordPress plugin) : The vulnerability is a Missing Authorization flaw in TelSender that allows exploitation of an incorrectly configured access control security level. Affected: TelSender versions
CVE-2023-41664
CVE-2023-41664 corresponds to a Missing Authorization flaw in the WordPress plugin Easy Newsletter Signups (
CVE-2023-41133
CVE-2023-41133 is a WordPress plugin vulnerability in Secure Admin IP (versions
CVE-2023-41649
CVE-2023-41649 affects the WordPress plugin Ovic Product Bundle (versions up to 1.1.2). The issue is a Missing Authorization / Broken Access Control vulnerability that allows unauthenticated users to exploit misconfigured access controls. Across connected records, there is no published patch vers...
CVE-2023-41132
CVE-2023-41132 relates to the WordPress plugin Category Slider for WooCommerce (
CVE-2023-41130
CVE-2023-41130 concerns the WordPress plugin Premmerce User Roles (Premmerce) where a missing authorization check in role-management functions leads to a Broken Access Control vulnerability. Affected versions are
CVE-2023-40005
Technical details (affected product, vulnerable components, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from official advisories and vendors for CVE-2023-40005.
CVE-2023-40003
CVE-2023-40003 is a Broken Access Control vulnerability in the WP Project Manager WordPress plugin (versions
CVE-2023-40001
CVE-2023-40001 affects the WordPress plugin iThemes Sync (vulnerable:
CVE-2023-39920
CVE-2023-39920 affects the WordPress plugin Redirection for Contact Form 7 (wpcf7-redirect) up to version 2.9.2. The vulnerability is a Missing Authorization / Broken Access Control issue that allows exploitation due to incorrectly configured access levels, with unauthenticated access typically c...
CVE-2023-39305
CVE-2023-39305 affects the WordPress plugin Yet Another Stars Rating (YASR) up to version 3.4.3, with a Missing Authorization / Broken Access Control issue occurring via the plugin’s init flow. This allows unauthenticated attackers to perform unauthorized actions (e.g., modifying data) on affecte...
CVE-2023-38483
CVE-2023-38483 — WordPress Instant CSS : A missing authorization vulnerability (Broken Access Control) in Instant CSS, affecting versions up to 1.1.4. The issue arises from missing authorization checks, enabling exploitation via AJAX actions. Patch available in version 1.1.5. CVSS v3.1 base score...
CVE-2023-35037
CVE-2023-35037 affects the WordPress Surfer plugin (surferseo): Broken access control in Surfer
CVE-2023-33998
CVE-2023-33998 affects the WordPress plugin Easy Social Icons (vulnerable:
CVE-2023-33324
CVE-2023-33324 is a Missing Authorization/Broken Access Control vulnerability in WordPress plugin Easy Captcha (versions up to 1.0). The issue arises from insufficient access checks, enabling unauthorized entities to perform restricted actions. The vulnerability affects Easy Captcha